-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hello,
There seems to be just a bit to do with the latest openssh (5.8p1) and
ControlPersist. I encountered two problems:
1. When I use ControlPersist in combination with ProxyCommand to reach a
other host over that proxy I get the following message:
Bad packet length 1397966893.
Disconnecting: Paket corrupt
When I fist ssh to the proxy, close the connection (that persists in
background) and ssh to the target everything works well.
2. When I use cvs over ssh and use ControlPersist and ProxyCommand every
ssh command will block at the end for exact the time I specify in
ControlPersist. (Note that I have to start the proxy first like I
described in the first issue.)
For the later problem I think that maybe putting the persistent ssh in a
separate process group would help. For the first problem I have no idea.
But maybe the problems are the same.
Regards
Klaus Ethgen
Ps. Please set me to Cc as I don't read the list.
- --
Klaus Ethgen http://www.ethgen.ch/
pub 2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <Klaus at Ethgen.de>
Fingerprint: D7 67 71 C4 99 A6 D4 FE EA 40 30 57 3C 88 26 2B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEUAwUBTX4xGp+OKpjRpO3lAQqVYQf4zdD83MsXVugIXz0swidhbWZvM5R5zVGt
b/nwl0DF0EWnu3NN8zeiq6Z+Wr3kr6X8aQ6FWqZ5ajuiTDAo1IrbIzePayRc1936
MmKdzYov2u0nT/RXgedNWB8BsU786mW+GSGSpASwAjLLsghZXXLxkCWKWBvJVNi/
UHxjg5QBcvwt0I3amzj3OZtrACHF9TNUdaX4nwFEeO1cA/MuvHTXP4kqvkYDR3W1
vBiA+RY1g6MT4d+OpE53FkRyGxGMGOf/8G7EGy6azJIxvCtfNiAi9EYNNLOw0qqY
2zN2MN+w7uf3B2J9EIpPvZ/pBuBx8ZGKdNlg7RBhE3CvuWTjhgXQ
=zB+a
-----END PGP SIGNATURE-----
Quoth Klaus Ethgen on Monday, March 14, 2011 8:16 AM> > There seems to be just a bit to do with the latest openssh (5.8p1) and > ControlPersist. I encountered two problems: > > 1. When I use ControlPersist in combination with ProxyCommand to reach > a > other host over that proxy I get the following message: > Bad packet length 1397966893. > Disconnecting: Paket corrupt >I'm not sure what's causing that error, but that packet length translates to 0x5353482D or "SSH-"
On Mon, Mar 14, 2011 at 04:15:40PM +0100, Klaus Ethgen wrote:> There seems to be just a bit to do with the latest openssh (5.8p1) and > ControlPersist. I encountered two problems: > > 1. When I use ControlPersist in combination with ProxyCommand to reach a > other host over that proxy I get the following message: > Bad packet length 1397966893. > Disconnecting: Paket corrupt > > When I fist ssh to the proxy, close the connection (that persists in > background) and ssh to the target everything works well.I use this in .ssh/config, and it works for me (and has been working for a long time): Host * CheckHostIP yes ControlMaster auto ControlPath ~/.ssh/mux-%r@%h:%p ControlPersist 3m HashKnownHosts yes NoHostAuthenticationForLocalhost yes Protocol 2 Host ssh.cwi.nl ProxyCommand none StrictHostKeyChecking yes Host *.cwi.nl User schipper ProxyCommand ssh ssh.cwi.nl netcat %h %p This is on OpenBSD-current (OpenSSH_5.8, OpenSSL 1.0.0a 1 Jun 2010). What are you connecting to what, and does it really say _Paket_ corrupt?> 2. When I use cvs over ssh and use ControlPersist and ProxyCommand every > ssh command will block at the end for exact the time I specify in > ControlPersist. (Note that I have to start the proxy first like I > described in the first issue.)That's a known issue with certain programs (including e.g. Subversion, IIRC), but I don't recall how to fix it. Sorry. Joachim